Tim Kientzle wrote:

Try an 'fstat' when connections start getting dropped.
I wonder if something (PAM module, maybe?) is opening a
file on each connection and you're running out of per-process
file descriptors.

A similar thing happened here - although it wasn't sshd at fault. Len mentioned using ldap authentication.


nss_ldap and/or pam_ldap are use TCP connections to connect to the LDAP server. In my case there was another big consumer of persistent ldap connections that caused slapd to reach its default 1024 descriptor limit (which required a compile-time adjustment). Found this by tracing the master slapd process.

-Jamie

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to